开发者

SQL Server variable columns name?

I am wondering why I cannot use variable column name like that:

declare @a as varchar;
set @a='TEST'

select @a from x;
开发者_JAVA百科

Thank you


You can't do it because SQL is compiled before it knows what the value of @a is (I'm assuming in reality you would want @a to be some parameter and not hard coded like in your example).

Instead you can do this:

declare @a as varchar; 
set @a='TEST' 

declare @sql nvarchar(max)
set @sql = 'select [' + replace(@a, '''', '''''') + '] from x'

exec sp_executesql @sql

But be careful, this is a security vulnerability (sql-injection attacks) so shouldn't be done if you can't trust or well clean @a.


Because it is not allowed.

Insted of this you could use dynamic sql query:

declare @a as varchar;
set @a='TEST'
exec ('select ' + @a + ' from x')


Because the column names are resolved at compile time not at run time for the SQL statement.


use sp_executesql for this

Example
SET @SQLString = N'SELECT *
    FROM table1
    WHERE timet = @time and items in (@item)';


DECLARE @SQLString nvarchar(500);
DECLARE @ParmDefinition nvarchar(500);

SET @ParmDefinition = N'@time timestamp,
    @item varchar(max) ';

EXECUTE sp_executesql
    @SQLString
    ,@ParmDefinition
    ,@time = '2010-04-26 17:15:05.667'
    ,@item = '''Item1'',''Item2'',''Item3'',''Item4'''
    ;


If there are not too many columns to chose, how about a CASE WHEN statement?

DECLARE @ColName VARCHAR(50) = 'Test1'

SELECT [Foo], [Bar],
CASE 
  WHEN @ColName = 'Test1' THEN [Test1]
  WHEN @ColName = 'Test2' THEN [Test2]
  WHEN @ColName = 'Test3' THEN [Test3]
  WHEN @ColName = 'Test4' THEN [Test4]
  ELSE [TestDefault]
END [TestResult]
FROM [TableName];

This avoids using any EXEC.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜